
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/A023DD56B12F11EEB1221E32C4F9AE02.roa
File: A023DD56B12F11EEB1221E32C4F9AE02.roa (raw, json)
Hash identifier: 70legGmeGWDJLjLTpZoQ9AL6l+i0i0dYyab0cFhZx6Q=
Subject key identifier: 35:C6:39:8C:FC:1A:88:1F:20:5D:E3:1B:7D:54:B9:A9:4B:30:0E:2F
Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Certificate serial: 0192
Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/A023DD56B12F11EEB1221E32C4F9AE02.roa
Signing time: Sun 01 Mar 2026 05:24:54 +0000
ROA not before: Sun 01 Mar 2026 05:24:54 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152328
IP address blocks: 157.10.172.0/23 maxlen: 23
157.10.172.0/24 maxlen: 24
157.10.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Validity
Not Before: Mar 1 05:24:54 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3cda6-253b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:e6:8d:de:1b:c1:cc:3b:c5:58:ce:28:6d:
ec:f8:5b:fb:14:4f:5e:7f:91:c7:44:8a:d4:87:32:
a0:e0:6d:73:44:fa:2c:5b:61:78:5b:a3:71:4a:d6:
2b:4e:4a:8b:43:ea:20:37:cf:08:d6:6b:33:bd:bf:
dc:51:4b:0c:14:a2:ac:5f:34:bb:0d:6f:08:2b:9c:
34:fb:e3:e8:d9:95:22:aa:ae:80:52:4f:1a:c3:40:
f0:37:8c:f4:60:70:9e:ba:d0:93:cd:96:be:15:06:
c0:c8:0a:7c:eb:6f:9f:0c:78:d8:f3:18:81:7e:88:
31:42:5f:5c:5d:ed:f3:62:b6:04:83:91:f0:92:0c:
83:a0:d5:39:ae:83:27:a7:90:a5:19:91:78:07:8e:
8c:59:60:d5:17:1c:cf:22:1b:7f:41:9b:b2:64:2e:
70:ee:4d:0f:46:63:8a:a2:ee:62:df:ae:25:1b:a9:
43:a8:94:14:de:07:ff:1c:28:a0:b1:af:d5:0d:e2:
8a:d8:b8:3f:cd:f9:06:ef:0c:72:cc:00:2a:22:a3:
4c:f1:e5:52:b3:95:72:a7:ab:a1:76:4b:1a:de:11:
53:e0:3d:e8:26:fb:d2:84:f6:c8:df:3e:f6:82:64:
ac:f8:ca:9c:3d:28:0f:6a:f0:09:01:91:db:56:8e:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C6:39:8C:FC:1A:88:1F:20:5D:E3:1B:7D:54:B9:A9:4B:30:0E:2F
X509v3 Authority Key Identifier:
keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/A023DD56B12F11EEB1221E32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.172.0/23
Signature Algorithm: sha256WithRSAEncryption
80:88:aa:27:7f:ac:7a:38:2e:0f:cf:be:7d:e5:75:82:6f:b0:
b0:60:24:4e:c6:b8:fe:1d:2c:35:de:a9:b2:fd:2d:65:d1:fc:
87:f9:ac:4f:92:6d:c0:d7:6f:35:93:3d:db:ea:83:7d:42:62:
9a:9d:9a:e8:b9:5e:26:32:0a:28:d5:87:8f:0d:26:f7:b8:d8:
18:ac:03:85:f5:5a:dc:b4:b7:47:14:19:dd:b5:b2:7e:a9:5c:
c8:1d:d7:34:bd:e6:76:73:59:e4:56:84:d5:26:cc:90:ff:4f:
be:0b:54:7f:af:2d:40:b5:12:be:f6:0c:3a:16:b3:a1:8c:21:
ca:61:6d:9d:f7:0c:c9:c0:b8:e0:20:ef:ff:e1:12:c2:b2:e7:
52:ac:0d:ef:47:04:31:6c:53:02:9c:4c:43:25:60:b4:e4:d8:
90:99:d9:91:50:aa:44:cb:22:13:72:2d:4f:be:0f:0c:8e:eb:
a8:de:c2:f0:92:41:19:74:fc:dc:9d:2d:36:6a:b7:e6:e2:12:
b3:6a:df:41:d1:79:11:7f:1e:ff:f9:28:b0:38:8a:1a:11:e8:
df:6d:01:49:05:76:ee:7b:a3:d0:d8:19:d0:b7:92:46:6d:de:
15:d3:ec:02:82:2a:0c:fe:f5:b6:8e:b6:2e:37:ca:14:ae:61:
27:27:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:55 2026 by rpki-client